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Description 

[0001] The present invention relates to computer net- 
works, and more specifically to a computer network that 
provides protection switching to reroute data packets in 5 
the event of a network link failure. 
[0002] The various links of a computer network are 
paths between network nodes that communicate 
streams of data. In an Internet Protocol (IP) based com- 
puter network, data routing protocols such as Open 10 
Shortest Path First (OSPF), Intermediate System-Inter- 
mediate System (IS-IS), and Routing Information Pro- 
tocol (RIP) are used to determine the path that data 
packets travel through the network. As a specific exam- 
ple, OSPF is a link-state protocol in the IP suite that en- 15 
ables routers to exchange information regarding topo- 
logical changes within the network, as the link state da- 
tabase is modified. With this information, each router 
builds a shortest-path tree with itself as the tree root to 
identify the shortest path from itself to each destination 20 
and to build its routing table. 

[0003] A router in a label switching network may 
sometimes explicitly route a particular data packet to an- 
other intermediate router that is not the ultimate desti- 
nation of the packet, even though the two routers are 25 
not consecutive on the hop-by-hop path for that packet. 
For example, the affected data packet may be encap- 
sulated inside a network layer packet whose destination 
is the intermediate router. This process establishes a 
"tunnel" between the two routers, and any data packet 30 
so handled is referred to as a "tunneled packet." A hop- 
by-hop tunnel follows the hop-by-hop path between the 
two routers. A tunneled packet that follows other than 
the hop-by-hop path is said to use an explicitly routed 
tunnel. 35 
[0004] Occasionally, a link between two network rout- 
ers may fail. When a link fails, the routing protocols are 
used to advertise- the failure throughout the network. 
Most routers can detect a local link failure relatively 
quickly, but it takes the network as a whole a much long- <o 
er time to converge. This convergence time is typically 
on the order of 1 0-60 seconds depending on the routing 
protocol and the size of the network. Eventually, all of 
the involved routers learn of the link failure and compute 
new routes for data packets to affected destinations. 45 
Once all the routers converge on a new set of routes, 
data packet forwarding proceeds normally. 
[0005] While the network is converging after a link 
fails, transient loops can occur which consume valuable 
network bandwidth. A loop occurs when two or more in- so 
termediate routers in a given network path fail to update 
their internal representations of the network topology at 
the same time, and end up repeatedly passing data traf- 
fic between themselves rather than on to the correct 
destination. Loop prevention algorithms have been pro- 55 
posed to eliminate such transient loops. When using 
loop prevention algorithms, existing routes are main- 
tained until the network has converged and the new 



routes have been proven to be loop-free. Loop preven- 
tion algorithms have the advantage that data packets 
flowing on unaffected routes are not disrupted while 
transient loops are eliminated. One drawback of loop 
prevention algorithms, however, is that data packets di- 
rected out of a failed link get lost, or "black holed," during 
the convergence. Moreover, since loop prevention algo- 
rithms also extend the convergence time somewhat 
while new routes are being verified to be loop-free, ad- 
ditional data may be lost on the failed link. 
[0006] US 58751 72 discloses a system for automati- 
cally restoring a transmission line in trouble in a com- 
munication network comprising a synchronous optical 
transmission network. A trouble working path is by- 
passed by provisioning a spare path. After restoration 
of the working path, path switching to the initial state is 
made. 

[0007] US 5581 543 discloses a network that is capa- 
ble of responding to a failed link. When a failed link is 
detected, a "link failed" message is sent by a node that 
has detected the failed link to a route-determining node. 
The route determining node then re-calculates routes 
across the network so as to avoid the failed link, and 
sends the new routing information to other nodes. Once 
the other nodes have received the new routing informa- 
tion, the nodes implement the re-calculated routes so 
as to avoid routing data via the failed link. To avoid ex- 
cessive loss of data to the failed link while the new routes 
are being calculated, an interim re-routing procedure is 
implemented at nodes adjacent to the failed link until the 
re-calculated routes can be implemented. The interim 
procedure diverts data at a node to a link located coun- 
ter-clockwise to the failed link. 

[0008] EP 0836344 discloses an asynchronous trans- 
fer mode (ATM) virtual path switching node. In one as- 
pect, the node comprises a link monitoring unit for mon- 
itoring a fault in each of the plurality of links. 
[0009] Viswanathan, A et al: "Evolution of Multiproto- 
col Label Switching" IEEE Communications Magazine, 
IEEE Service Center, Piscataway, N.J, US, vol. 36, no. 
5, 1 May 1998, pages 165-173 provides an overview of 
Multiprotocol Label Switching architecture and design. 
[0010] According to an aspect of the invention, there 
is provided a backup controller for providing protection 
switching in the event of a link failure of a routing node 
that delivers data packets to a computer network via a 
plurality of links, the backup controller comprising: 
means for pre-identifying, for at least one link of the rout- 
ing node, a backup routing path for 

forwarding affected data packets in the event of a 
failure of the at least one link; means for monitoring the 
plurality of links to determine when a link fails; means 
for attaching, when a link which has a pre-identified 
backup routing path fails, backup routing path instruc- 
tions to affected data packets routed over the failed link; 
and means for forwarding the affected data packets via 
the backup routing path, wherein the backup routing 
path comprises an explicitly routed label switched path. 
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[001 1] The invention also provides a data router and 
a computer network each comprising the backup con- 
troller described above. 

[0012] According to another aspect of the invention, 
there is provided a method of providing protection 5 
switching in the event of a link failure of a computer net- 
work routing node that delivers data packets to a com- 
puter network via a plurality of links, the method com- 
prising: pre-identifying, for at least one link of the routing 
node, a backup routing path for forwarding affected data 10 
packets in the event of a failure of the at least one link; 
monitoring the plurality of links to determine when a link 
fails; when a link which has a pre-identified backup rout- 
ing path fails, attaching backup routing path instructions 
to affected data packets routed over the failed link; and * 5 
forwarding the affected data packets via the backup 
routing path, wherein the backup routing path comprises 
an explicitly routed label switched path. 
[0013] An embodiment of the invention provides a 
backup controller that provides protection switching in 20 
the event of a link failure of a routing node that delivers 
datapackets to a computer network via a plurality of 
links. The computer network may use, for example, a 
label switching routing protocol. The backup controller 
has a backup path manager, a link monitor, and a back- 25 
up packet processor. For at least one link of the routing 
node, the backup path manager identifies a backup rout- 
ing path for forwarding affected data packets in the 
event of a failure of the at least one link. The link monitor 
monitors the plurality of links to determine when a link 30 
fails. When a link which has a backup routing path fails, 
the backup packet processor attaches backup routing 
path instructions to affected data packets routed over 
the failed link, and forwards the affected data packets 
via the backup routing path. 35 
[0014] This backup controller may be used in a data 
router that delivers data packets to a computer network 
.via a plurality of links. The data router provides protec- 
tion switching in the event of a link failure. The data rout- 
er also has a data interface for data packets to enter and 40 
exit the router, and a backup controller. Such a data rout- 
er may also have a failed link recalculatorthat establish- 
es a new network route to replace a failed link. The failed 
link recalculator may use a loop prevention algorithm, 
after a link failure, for determining that the network has 45 
converged and is loop-free. 

[0015] The data router of the invention may also be 
included in a computer network having a plurality of data 
packet streams. The network has a plurality of subnet- 
works, each subnetwork having at least one application 50 
that generates a stream of data packets for transmission 
over the computer network; and a plurality of routers that 
deliver data packets to the network via a plurality of links, 
at least one router providing protection switching in the 
event of a link failure. 55 
[0016] The invention also provides a method of pro- 
viding protection switching in the event of a link failure 
of a computer network routing node that delivers data 



packets to a computer network via a plurality of links. 
The method includes identifying, for at least one link of 
the routing node, a backup routing path for forwarding 
affected data packets in the event of a failure of the at 
least one link; monitoring the plurality of links to deter- 
mine when a link fails; when a link which has a backup 
routing path fails, attaching backup routing path instruc- 
tions to affected data packets routed over the failed link; 
and forwarding the affected data packets via the backup 
routing path. In a further embodiment, a loop prevention 
algorithm may be used after a link failure to determine 
that the network has converged and is loop-free. 
[001 7] The method may be implemented by a compu- 
ter program for use on a computer system. 
[001 8] The backup controller may further advertise a 
link failure to the network using a routing protocol. The 
backup routing path instructions may include a label 
stack based on Multi-Protocol Label Switching (MPLS), 
and the label stack may include labels for a packet 
source and a packet destination. The backup routing 
path may be a Label Switched Path (LSP), based on, 
for example, network topology information such as • 
could be derived from a network protocol. Examples of 
the invention will now be described in detail with refer- 
ence to the accompanying drawings, in which: 

Fig. 1 is an illustration of a computer network which 
provides label switching-based backup path protec- 
tion switching according to a representative embod- 
iment. 

Fig. 2 is an illustration of a network node router 
which supports backup paths according to a repre- 
sentative embodiment. 

Fig. 3 is a flow chart illustration of the logical steps 
in a method of providing backup path protection 
switching according to a representative embodi- 
ment. 

*« 

[0019] Representative embodiments of the present 
invention use a label switching protocol to establish 
backup paths with explicit routing for use in the event of 
a link failure in a computer network. A label is a short, 
fixed length, physically contiguous, locally significant 
identifier which is used to identify a given data stream 
in a label switching network. Multi-Protocol Label 
Switching (MPLS) is an example of a network layer- 
based label switching routing protocol that uses a for- 
warding paradigm based on label swapping to forward 
data traffic. Data forwarding between two adjacent net- 
work nodes using MPLS labels is known as a label 
switched hop. The concatenation of one or more label 
switched hops defines a Label Switched Path (LSP) that 
allows data packets to be forwarded from one MPLS 
node to another MPLS node by swapping labels. Explicit 
routing of an LSP is when the LSP is specified by the 
source of a data stream. The sequence of nodes defined 
by the LSP are defined by a layered stack of MPLS la- 
bels that typically may include a packet source label, a 
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packet destination label, and labels for the nodes in the 
defined LSP. 

[0020] In exemplary embodiments, each router estab- 
lishes a backup path for each protected local link using 
MPLS-based Label Switched Path (LSP) tunnels. That 
is, a data packet sent over such a backup path follows 
an explicitly specified MPLS-LSP Data packets are au- 
tomatically rerouted on the backup link in the event that 
a protected link fails. 

[0021] Fig. 1 is an illustration of an computer network 
capable of providing label switching-based protection 
switching in accordance with illustrative embodiments 
of the present invention. Network routers R1 101 - R5 
105 are connected by primary network links 111-116. 
Thus, in the network shown in Fig. 1 , router devices R1 
101 and R2 102 are connected by primary network link 
111, R1 101 and R3 103 are connected by primary net- 
work link 112, R2 102 and R3 103 are connected by pri- 
mary network link 113, R2 102 and R4 104 are connect- 
ed by primary network link 114, R3 103 and R5 105 are 
connected by primary network link 115, and R4 104 and 
R4 104 are connected by primary network link 116. 
[0022] For each primary network link, a backup path 
is established to be used in the event that the primary 
link fails. For example, if link L 3-5 115 fails, router R3 
103 immediately starts to send data packets that would 
normally go to router R5 105 over link L 3-5 115 on LSP 
backup path L' 3-5 121. When router R5 105 receives a 
packet via the backup path L' 3-5 121 , it treats the packet 
just as if the packet had been received on the original 
failed link L 3-5 115. For clarity Fig. 1 shows only one 
such backup path 121, which represents the MPLS- 
based backup LSP for primary link 115 from router R3 
103 to router R5 105. In representative embodiments, 
there may be a backup path for every primary network 
link. 

[0023] Fig. 2 is an illustration of a network router de- 
vice which supports backup paths according to a repre- 
sentative embodiment. Fig. 3 is a flow chart of illustrative 
method steps in providing backup path protection with 
the router device of Fig. 2. Network node router 20 is a 
part of a computer network 22, which are in mutual com- 
munication via a plurality of network node data links 21. 
Router 20 also serves to connect one or more local area 
networks (LANs) 23 having one or more workstations 
231. Data packets enter and exit the router 20 as con- 
trolled by a data interface driver 24 which is connected 
to the network node links 21. Router 20 also includes a 
backup controller 25 having a link monitor 26, a backup 
packet processor 27, and a backup path manager 28. 
[0024] For each link to be protected, a backup path 
manager 28 identifies a backup path for forwarding af- 
fected data packets in the event that the protected link 
fails, step 301. Backup paths can be hand configured or 
"automatically" computed using a link-state routing pro- 
tocol, e.g., Open Shortest Path First (OSPF). To auto- 
matically compute a backup path, the backup path man- 
ager 28 removes the primary link to be protected from 



its topology database, and then recomputes the shortest 
path to the destination router using a shortest-path al- 
gorithm. In typical embodiments, explicitly routed MPLS 
Label Switched Path (LSP) tunnels are used since the 
5 backup path follows a sub-optimal route that does not 
correspond to the normally routed path. Alternative em- 
bodiments may use another label switching protocol 
other than MPLS. 

[0025] A link monitor 26 monitors protected links of 

10 the router for failure, step 302. A link may fail, for exam- 
ple, if the path between two nodes is physically disrupt- 
ed, or if a router loses power, disabling the connected 
links. Various different mechanisms may be used to de- 
tect such a link failure. For example, in a 100BASE-TX 

15 link integrity test, Fast Ethernet transceiver circuits con- 
tinually monitor the receive data path for activity as a 
means of checking that the link is working correctly. The 
signaling system used for 100BASE-TX segments is 
based on the ANSI FDDI signaling system, which sends 

20 signals continually, even during idle periods of no net- 
work traffic. Therefore, activity on the receive data path 
is sufficient to provide a continual check of link integrity. 
[0026] When the link monitor 26 initially determines 
that a protected link has failed, in step 303, backup pack- 

25 et processor 27 attaches backup path instructions from 
the backup path manager 28-for example, MPLS labels 
to affected data packets, which are forwarded through 
the network 22 over the backup for the failed link, step 
304. A predetermined period of time after the first de- 

30 tection of a link failure, the failure may be considered to 
be more than a temporary phenomenon, and the link 
may be considered to have positively failed. The router 
20 then advertises the link failure to the network 22, in 
step 305, using a routing protocol, e.g., Open Shortest 

35 Path First (OSPF). 

[0027] New routes are determined to replace the 
failed link, step 306. In step 307, a diffusion-based loop- 
prevention algorithm determines' when the network 22 
has converged on new routes and is loop-free. To de- 

40 scribe how loop prevention algorithms operate, it is im- 
portant to first understand that most routing protocols 
use what are called "shortest-path" algorithms, which 
may be further sub-classified as being either distance- 
vector or link-state algorithms. A network node using a 

45 distance-vector algorithm, for example, knows the 
length of the shortest path from each neighboring node 
to every network destination. Based on this information, 
the node calculates the shortest path and next node in 
the path for each destination. Such nodes send to neigh- 

50 boring nodes update messages containing vectors of 
one or more entries each specifying the distance to a 
given destination. Receiving an update message may 
cause a node to generate an update message of its own. 
As a further example, a network node using a link-state 

55 algorithm (also called a topology broadcast algorithm) 
must know the topology of the entire network (or at least 
receive such information) in order to compute the short- 
est path to each network destination. Such nodes broad- 
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cast to every other node in the network, update mes- 
sages containing the state of each of the node's adja- 
cent links. 

[0028] To avoid transient loops, loop prevention algo- 
rithms have been proposed based on diffusing compu- 
tations, such as described by Garcia-Lunes-Aceves in 
Loop-Free Routing Using Diffusing Computations, 
IEEE/ACM Transactions on Networking, Vol. 1, No. 1, 
1993. To that end, a family of distance vector algorithms 
are proposed which converge in a finite time after an 
arbitrary sequence of link cost or topological changes, 
being loop-free at any given instant, and having advan- 
tageous efficiency with respect to combined temporal, 
message, and storage complexities. Thus, loss of data 
packets is avoided by using the LSP tunnels to forward 
the affected data packets while the loop prevention al- 
gorithm is running. 

[0029] Finally, in step 308, once the new routes are 
confirmed to be loop-free, the routers revert from the 
back up path to the new routes, and the backup path 
manager 28 calculates new backup paths for the newly 
« - established routes. 
[0030] Since representative embodiments use label 
switching, the present invention can operate success- 
fully in any arbitrary network topology. It should be not- 
ed, however, that to realize full link-level protection, the 
network should have the property that for every two 
neighbors A and B connected by link L, there exists an- 
other path between A and B that does not include L. Var- 
ious options may be employed with respect to network- 
level encapsulation on the original link. For example, the 
original network-layer encapsulation (e.g., IP) may be 
tunneled in the backup LSP. If MPLS is used on the orig- 
inal link, then the labeled packet may be tunneled on the 
backup path using MPLS label stacking. Multiple inde- 
pendent link failures may be tolerated using multiple lay- 
ers of tunneling. 

[0031] Various embodiments-of.the invention, or por- 
tions thereof (e.g., the link monitor 26, the backup pack- 
et processor 27, the backup path manager 28, etc.), may 
be implemented in any conventional computer program- 
ming language. For example, representative embodi- 
ments may be implemented in a procedural program- 
ming language (e.g., "C") or an object oriented program- 
ming language (e.g., "C++" or "JAVA"). Alternative em- 
bodiments of the invention may be implemented as pre- 
programmed hardware elements (e.g., application spe- 
cific integrated circuits), or other related components. 
[0032] Alternative embodiments of the invention may 
be implemented as a computer program product for use 
with a computer system. Such implementation may in- 
clude a series of computer instructions fixed either on a 
tangible medium, such as a computer readable media 
(e.g., a diskette, CD-ROM, ROM, or fixed disk), or trans- 
mittable to a computer system via a modem or other in- 
terface device, such as a communications adapter con- 
nected to a network over a medium. The medium may 
be either a tangible medium (e.g., optical or analog com- 



8 

munications lines) or a medium implemented with wire- 
less techniques (e.g., microwave, infrared or other 
transmission techniques). The series of computer in- 
structions preferably embodies all or part of the func- 
5 tionality previously described herein with respect to the 
system. Those skilled in the art should appreciate that 
such computer instructions can be written in a number 
of programming languages for use with many computer 
architectures or operating systems. Furthermore, such 
10 instructions may be stored in any memory device, such 
as semiconductor, magnetic, optical or other memory 
devices, and may be transmitted using any communica- 
tions technology, such as optical, infrared, microwave, 
or other transmission technologies. It is expected that 
15 such a computer program product may be distributed as 
a removable medium with accompanying printed or 
electronic documentation (e.g., shrink wrapped soft- 
ware), preloaded with a computer system (e.g., on sys- 
tem ROM or fixed disk), or distributed from a server or 
20 electronic bulletin board over the network (e.g., the In- 
ternet or World Wide Web). 

[0033]. Although various exemplary;.embodiments of 
the invention have been disclosed, it should be apparent 
to those skilled in the art that various changes and mod- 
25 ifications can be made without departing from the scope 
of the invention. 



Claims 

30 

1. A backup controller (25) for providing protection 
switching in the event of a link failure of a routing 
node that delivers data packets to a computer net- 
work (22) via a plurality of links (21), the backup 

35 controller comprising: 

means for pre-identifying, for at least one link 
of the. routing node, a backup routing path for 
forwarding affected data packets in the event 

40 of a failure of the at least one link; 

means for monitoring the plurality of links to de- 
termine when a link fails; 
means for attaching, when a link which has a 
pre-identified backup routing path fails, backup 

45 routing path instructions to affected data pack- 

ets routed over the failed link; and 
means for forwarding the affected data packets 
via the backup routing path, wherein the back- 
up routing path comprises an explicitly routed 

50 label switched path. 

2. A backup controller according to claim 1 , wherein 

the means for identifying comprises a backup 
55 path manager (28), 

the means for monitoring comprises a link mon- 
itor (26), 

the means for attaching and the means for for- 



5 



9 



EP 1 111 860 B1 



10 



warding comprise a backup packet processor 
(27). 

3. A backup controller according to claim 1 or 2, 
wherein the backup controller further comprises 
means for advertising a link failure to the network 
using a routing protocol. 

4. A backup controller according to any preceding 
claim, wherein the backup routing path instructions 
include a label stack based on Multi-Protocol Label 
Switching. 

5. A backup controller according to claim 4, wherein 
the label stack includes labels for a packet source 
and a packet destination. 

6. A backup controller according to any preceding 
claim, wherein the explicitly routed label switched 
path is based on network topology information. 

7. A backup controller according to claim .6, wherein- 
the network topology information is derived from a 
network protocol. 

8. A backup controller according to claim 1 or 2, 
wherein the computer network uses a label switch- 
ing routing protocol. 

9. A data router (20) for delivering data packets to a 
computer network (22) via a plurality of links, the 
router providing protection switching in the event of 
a link failure, the router comprising: 

a data interface (24) for data packets to enter 
and exit the router; and 

a backup controller (25) according to any one 
cr-claims~1 c to 10. 

10. A data router according to claim 9, further compris- 
ing a failed link recalculator for establishing a new 
network route to replace a failed link. 

11. A data router according to claim 10, wherein the 
failed link recalculator further uses a loop preven- 
tion algorithm after a link failure for determining that 
the network has converged and is loop-free. 

12. A computer network (22) having a plurality of data 
packet streams, the network comprising: 

a plurality of subnetworks, each subnetwork 
having at least one application that generates 
a stream of data packets for transmission over 
the computer network; and 
a plurality of routers (20) for delivering data 
packets to the network via a plurality of links 
(21), at least one router providing protection 



switching in the event of a link failure, the at 
least one router including: 

a plurality of data interfaces (24) for 
5 streams of data packets to enter and exit 

the at least one router; and 
a backup controller (25) according to any 
one of claims 1 to 8. 

10 13. A computer network according to claim 12, further 
comprising a failed link recalculator for establishing 
a new network route to replace a failed link. 

14. A computer network according to claim 13, wherein 
15 the failed link recalculator further uses a loop pre- 
vention algorithm after a link failure for determining 
that the network has converged and is loop-free. 

15. A method of providing protection switching in the 
20 event of a link failure of a computer network routing 

node that delivers data packets to a computer net- 
work (22) via a plurality, of links (21), the method 
comprising: 

25 pre-identifying, for at least one link of the rout- 

ing node, a backup routing path for forwarding 
affected data packets in the event of a failure 
of the at least one link (301); 
monitoring the plurality of links to determine 

30 when a link fails (302); 

when a link which has a pre-identified backup 
routing path fails, attaching backup routing path 
instructions to affected data packets routed 
over the failed link(303); and 

35 forwarding the affected data packets via the 

backup routing path (304), wherein the backup 
routing path comprises an explicitly routed label 
switched path. 

40 16. A method according to claim 15, further comprising 
advertising a link failure to the network using a rout- 
ing protocol (305). 

17. A method according to claim 1 5 or 1 6, further com- 
45 prising establishing a new network route to replace 

a failed link (306). 

18. A method according to any one of claims 15 to 17, 
further comprising using a loop prevention algo- 

50 rithm after a link failure to determine that the net- 
work has converged and is loop-free (307). 

19. A method according to any one of claims 15 to 18, 
wherein the backup routing path instructions in- 

55 elude a label stack based on Multi-Protocol Label 
Switching. 

20. A method according to claim 19, wherein the label 
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stack includes labels for a packet source and a 
packet destination. 

21 . A method according to any one of claims 15 to 20, 
wherein the explicitly routed label switched path is 5 
based on network topology information. 

22. A method according to claim 21 , wherein the net- 
work topology information is derived from a network 
protocol. 10 

23. A method according to any one of claims 1 5 to 22, 
wherein the computer network uses a label switch- 
ing routing protocol. 

15 

24. A computer program comprising computer program 
code means for performing all of the steps of the 
method of any one of claims 15 to 23 when said 
program is run on a computer. 

20 

25. A computer program according to claim 24 embod- 
.; .-v ied on a computer readable mediums ♦ . 

Patentanspruche 25 

1. Reserve-Steuerung (25) zur Bereitstellung einer 
Ersatzumschaltung im Fall eines Verbindungs- 
strecken-Ausfalls eines Routenfuhrungs-Knotens, 
der Datenpakete an ein Computernetzwerk (22) 30 
uber eine Vlelzahl von Verbindungsstrecken (21) 
liefert, wobei die Reserve-Steuerung Folgendes 
umfasst: 

Einrichtungen zur Vor-ldentifikation, fur zumin- 35 
dest eine Verbindungsstrecke des Routenfuh- 
rungs-Knotens, eines Reserve-Routenfuh- 
oingspfades zur Weiterleitung betroffener Da- 
tenpakete im Fall eines Ausfalls der zumindest 
einen Verbindungsstrecke; 40 
Einrichtungen zur Oberwachung der Vielzahl 
von Verbindungsstrecken, urn festzustellen, 
wann eine Verbindungsstrecke ausfallt; 
Einrichtungen zum Anbringen von Reserve- 
Routenfuhrungspfad-Befehlen an betroffene 45 
Datenpakete, die uber die ausgefallene Verbin- 
dungsstrecke gelenkt werden, wenn eine Ver- 
bindungsstrecke, die einen vor-identifizierten 
Reserve-Routenfuhrungspfad hat, ausfallt; und 
Einrichtungen zur Weiterleitung der betroffe- 50 
nen Datenpakete uber den Reserve-Routen- 
fuhrungspfad, wobei der Reserve-Routenfuh- 
rungspfad einen explizit routengefuhrten eti- 
kettvermittelten Pfad umfasst. 

55 

2. Reserve-Steuerung nach Anspruch 1 , bei der 

die Einrichtung zur Identifikation eine Reser- 
vepfad-Verwaltung (28) umfasst, 



die Einrichtung zur Oberwachung eine Ver- 
bindungsstrecken-Oberwachung (26) umfasst, 

die Einrichtung zum Anbringen und die Ein- 
richtung zum Weiterleiten einen Reserve-Paket- 
Prozessor (27) umfassen. 

3. Reserve-Steuerung nach Anspruch 1 oder 2, bei 
der die Reserve-Steuerung weiterhin Einrichtungen 
zur Ankiindigung eines Verbindungsstrecken-Aus- 
falls an das Netzwerk unter Verwendung eines Rou- 
tenfuhrungs-Protokolls umfasst. 

4. Reserve-Steuerung nach einem der vorhergehen- 
den Anspruche, bei der die Reserve-Routenfuh- 
rungspfad-Befehle einen Etikettstapel auf der 
Grundlage der Multiprotokoll-Etikettvermittlung ein- 
schliefcen. 

5. Reserve-Steuerung nach Anspruch 4, bei der der 
Etikettstapel Etiketten fur eine Paket-Quelle und ein 
Paket-Ziel einschlieftt. 

6. Reserve-Steuerung nach einem der vorhergehen- 
den Anspruche, bei der der explizit routengefuhrte 
etikettvermittelte Pfad auf Netzwerk-Topologie-ln- 
formation beruht. 

7. Reserve-Steuerung nach Anspruch 6, bei der die 
Netzwerk-Topologie-lnformation von einem Netz- 
werk-Protokoll abgeleitet ist. 

8. Reserve-Steuerung nach Anspruch 1 oder 2, bei 
der das Computernetzwerk ein etikettvermitteltes 
Routenfuhrungsprotokoll verwendet. 

9. Daten-Router (20) zur Lieferung von Paketen an ein 
Computernetzwerk (22) uber eine Vielzahl von Ver- 
bindungsstrecken, wobei der - Router eine Ersatz- 
umschaltung im Fall eines Verbindungsstrecken- 
Ausfalls ergibt, wobei der Router Folgendes um- 
fasst: 

eine Datenschnittstelle (24) fur Datenpakete 
zum Eintritt in den Router und zum Veriassen 
des Routers; und 

eine Reserve-Steuerung (25) nach einem der 
Anspruche 1-10. 

10. Daten-Router nach Anspruch 9, der weiterhin eine 
Streckenausfall-Neuberechnung zur Ausbildung ei- 
ner neuen Netzwerk-Route zum Ersatz einer aus- 
gefallenen Verbindungsstrecke umfasst. 

11. Daten-Router nach Anspruch 10, bei dem die Ver- 
bindungsstreckenausfall-Neuberechnungseinrich- 
tung weiterhin einen Schleifenvermeidungs-Algo- 
rithmus nach einem Verbindungsstrecken-Ausfall 
zur Feststellung verwendet, dass das Netzwerk 
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konvergiert hat und schleifenfrei ist. 

12. Computernetzwerk (22) mit einer Vielzahl von Da- 
tenpaket-Strdmen, wobei das Netzwerk Folgendes 
umfasst: 5 

eine Vielzahl von Teil-Netzwerken, wobei jedes 
Teil-Netzwerk zumindest eine Anwendung auf- 
weist, die einen Strom von Datenpaketen zur 
Obertragung uber das Computernetzwerk er- 10 
zeugt; und 

eine Vielzahl von Routern (20) zur Lieferung 
von Datenpaketen an das Netzwerk uber die 
Vielzahl von Verbindungsstrecken (21) wobei 
zumindest ein Router eine Ersatzumschaltung 1$ 
im Fall eines Verbindungsstrecken-Ausfalls er- 
gibt, wobei der zumindest eine Router Folgen- 
des einschlieftt: 

eine Vielzahl von Datenschnittstellen (24) 20 
fur Strdme von Datenpaketen fiir den Ein- 
tritt in den und den Austritt aus dem zumin- 
dest einen Router; und 
eine Reserve-Steuerung (25) nach einem 
der Anspruche 1-8. 25 



hat, ausfallt, Anbringen von Reserve-Routen- 
fuhrungspfad-Befehlen an betroffenen Daten- 
paketen, die uber die ausgefallene Verbin- 
dungsstrecke gelenkt werden (303); und 
Weiterleiten der betroffenen Datenpakete uber 
den Reserve-Routenfuhrungspfad (304), wo- 
bei der Reserve-Routenfuhrungspfad einen ex- 
plizit routengefuhrten etikettvermittelten Pfad 
umfasst. 

16. Verfahren nach Anspruch 15, das weiterhin die An- 
kundigung eines Verbindungsstrecken-Ausfalls an 
das Netzwerk unter Verwendung eines Routenfuh- 
rungs-Protokolls umfasst (305). 

1 7. Verfahren nach Anspruch 1 5 Oder 1 6, das weiterhin 
das Ausbilden einer neuen Netzwerk-Route zum 
Ersatz einer ausgefallenen Verbindungsstrecke 
umfasst (306). 

18. Verfahren nach einem der Anspruche 15-17, das 
weiterhin die Verwendung eines Schleifenvermeir. 
dungs-Algorithmus nach einem Verbindungsstrek- 
ken-Ausfall zur Feststellung umfasst, dass das 
Netzwerk konvergiert hat und schleifenfrei ist (307). 



13. Computernetzwerk nach Anspruch 12, das weiter- 
hin eine Verbindungsstreckenausfall-Neuberech- 
nungseinrichtung zur Ausbildung einer neuen Netz- 
werk-Route zum Ersatz einer ausgefallenen Ver- 30 
bindungsstrecke umfasst. 

14. Computernetzwerk nach Anspruch 13, bei dem die 
Verbindungsstreckenausfall-Neuberechnungsein- 
richtung weiterhin einen Schleifenvermeidungs-AI- 35 
gorithmus nach einem Verbindungsstrecken-Aus- 

fall zur Feststellung verwendet, das das Netzwerk 
konvergiert hat und schleifenfrei ist. . ... 

15. Verfahren zur Bereitstellung einer Ersatzumschal- *o 
tung in dem Fall eines Verbindungsstrecken-Aus- 
falls eines Com puternetzwerk-Routenfuh rung s- 
Knotens, der Datenpakete an ein Computernetz- 
werk (22) uber eine Vielzahl von Verbindungsstrek- 
ken (21 ) liefert, wobei das Verfahren Folgendes urn- 45 
fasst: 

Vor-ldentifizieren, fur zumindest eine Verbin- 
dungsstrecke des Routenfuhrungs-Knotens, 
eines Reserve-Routenfuhrungspfades zur 50 
Weiterleitung betroffener Datenpakete im Fall 
eines Ausfalls der zumindest einen Verbin- 
dungsstrecke (301 ); 

Qberwachen der Vielzahl von Verbindungs- 
strecken, urn festzustellen, wann eine Verbin- 55 
dungsstrecke ausfallt (302); 
wenn eine Verbindungsstrecke, die einen vor- 
identifizierten Reserve-Routenfuhrungspfad 



19. Verfahren nach einem der Anspruche 15-18, bei 
dem die Reserve-Routenfuhrungspfad-Befehle ei- 
nen Etikettstapel einschliefien, derauf derMultipro- 
tokoll-Etikettvermittlung beruht. 

20. Verfahren nach Anspruch 19, bei dem der Etikett- 
stapel Etiketten fiir eine Paket-Quelle und ein Pa- 
ket-Ziel einschliefit. 

21. Verfahren nach einem der Anspruche 15-20, bei 
dem der explizit routengefuhrte etikettvermittelte 
Pfad auf Netzwerktopologie-lnformation beruht. 

22. Verfahren nach Anspruch 21, bei dem die Netz- 
werktopologie-lnformation von einem Netzwerk- 
Protokoll abgeleitet wird. 

23. Verfahren nach einem der Anspruche 15-22, bei 
dem das Computernetzwerk ein etikettvermitteln- 
des Routenfuhrungs-Protokoll verwendet. 

24. Computerprogramm, das Computerprogramm-Co- 
deeinrichtungen zur Durchfuhrung aller der Schritte 
des Verfahrens nach einem der Anspruche 15-23 
umfasst, wenn das Programm auf einem Computer 
ablauft. 

25. Computerprogramm nach Anspruch 24, das auf ei- 
nem Computer lesbaren Medium verwirklicht ist. 
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Revendications 

1. Un contrdleur de protection (25) pour fournir une 
commutation de protection dans le cas d'une de- 
faillance affectant une liaison d'un noeud de routa- 5 
ge qui fournit des paquets de donnees a un reseau 
informatique (22) par I'intermediaire d'une plurality 

de liaisons (21), le contrdleur de protection 
comprenant : 

10 

un moyen pour pre-identifier, pour au moins 
une liaison du noeud de routage, un chemin de 
routage de secours pour acheminer des pa- 
quets de donnees affectes dans le cas d'une 
defaillance de I'au moins une liaison; *5 
un moyen pour surveiller la plurality de liaisons 
pour d6terminer le moment auquel une liaison 
devient defectueuse; 

un moyen pour adjoindre, lorsqu'une liaison qui 
a un chemin de routage de secours pre-identifie 20 
devient defectueuse, des instructions de che- 
< . min de routage de secours a des paquets de ... 
donnees affectes qui sont routes sur la liaison 
defectueuse; et 

un moyen pour acheminer par le chemin de 25 
routage de secours les paquets de donnees af- 
fectes, le chemin de routage de secours com- 
prenant un chemin a commutation par etiquet- 
tes avec routage explicite. 

30 

2. Un contrdleur de protection selon la revendication 
1, dans lequel 

le moyen pour identifier comprend un gestion- 
naire de chemin de secours (28), 

le moyen pour surveiller comprend un moni- 35 
teur de liaisons (26), 

le moyen pour adjoindre et le moyen pour 
acheminer comprennent un processeurde paquets 
de secours (27). 

40 

3. Un controleur de protection selon la revendication 
1 ou 2, dans lequel le controleur de protection com- 
prend en outre un moyen pour declarer une de- 
faillance de liaison au reseau en utilisant un proto- 
col de routage. 45 

4. Un controleur de protection selon Tune quelconque 
des revendications precedentes, dans lequel les 
instructions de chemin de routage de secours com- 
prennent une pile d'etiquettes basee sur une Com- 50 
mutation par Etiquettes Multiprotocole. 

5. Un contrdleur de protection selon la revendication 
4, dans lequel la pile d'etiquettes comprend des eti- 
quettes pour une source de paquets et une desti- 55 
nation de paquets. 

6. Un controleur de protection selon I'une quelconque 



des revendications precedentes, dans lequel le 
chemin a commutation par etiquettes avec routage 
explicite est base sur une information de topologie 
de reseau. 

7. Un controleur de protection selon la revendication 
6, dans lequel I'information de topologie de reseau 
est derivee a partir d'un protocole de reseau. 

8. Un controleur de protection selon la revendication 
1 ou 2, dans lequel le reseau informatique utilise un 
protocole de routage a commutation par etiquettes. 

9. Un routeur de donnees (20) pour fournir des pa- 
quets de donnees a un reseau informatique (22) par 
I'intermediaire d'une pluralite de liaisons, le routeur 
fournissant une commutation de protection dans le 
cas d'une defaillance affectant une liaison, le rou- 
teur comprenant : 

une interface de donnees (24) pour permettre 
a des paquets de donnees d'entrer dans le/ou^ v - 
teur et de sortir de celui-ci; et 
un controleur de protection (25) selon Tune 
quelconque des revendications 1 a 10. 

10. Un routeur de donnees selon la revendication 9, 
comprenant en outre un moyen de reprise de calcul 
de liaison defectueuse pour etablir une nouvelle 
route de reseau pour remplacer une liaison defec- 
tueuse. 

11. Un routeur de donnees selon la revendication 10, 
dans lequel un moyen de reprise de calcul de liaison 
defectueuse utilise en outre un algorithme de pre- 
vention de boucle apres I'apparition d'une defaillan- 
ce de liaison, pour determiner que le reseau a con- 
verge ef est depourvu de boucle. 

12. Un reseau informatique (22) ayant une pluralite de 
flux de paquets de donnees, le reseau comprenant : 

une pluralite de sous-reseaux, chaque sous-re- 
seau ayant au moins une application qui gene- 
re un flux de paquets de donnees pour la trans- 
mission sur le reseau informatique; et 
une pluralite de routeurs (20) pour fournir des 
paquets de donnees au reseau par I'interme- 
diaire d'une pluralite de liaisons (21), au moins 
un routeur fournissant une commutation de 
protection dans le cas d'une defaillance affec- 
tant une liaison, I'au moins un routeur incluant : 

une pluralite d'interfaces de donnees (24) 
pour permettre a des flux de paquets de 
donnees d'entrer dans I'au moins un rou- 
teur et de sortir de celui-ci; et 
un controleur de protection (25) selon I'une 
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quelconque des revendications 1 a 8. 

13. Un reseau informatique selon la revendication 12, 
comprenant en outre un moyen de reprise de calcul 

de liaison defectueuse pour etablir une nouvelle 5 
route de reseau pour remplacer une liaison defec- 
tueuse. 

14. Un reseau informatique selon la revendication 13, 
dans lequel le moyen de reprise de calcul de liaison 10 
d6fectueuse utilise en outre un algorithme de pre- 
vention de boucle apres {'apparition d'une defaillan- 

ce de liaison pour d6terminer que le reseau a con- 
verge et est depourvu de boucle. 

15 

15. Un procede pour assurer une commutation de pro- 
tection dans le cas d'une defaillance affectant une 
liaison d'un noeud de routage de reseau informati- 
que qui fournit des paquets de donnees a un reseau 
informatique (22) par Pintermediaire d'une pluralite 20 
de liaisons (21), le procede comprenant les etapes 

. . consistant.a : >. 

pre-identifier, pour au moins une liaison du 
noeud de routage, un chemin de routage de se- 25 
cours pour acheminer des paquets de donnees 
affectes, dans le cas d'une defaillance de I'au 
moins une liaison (301); 
surveiller la pluralit6 de liaisons pour determi- 
ner le moment auquel une liaison devient de- 30 
fectueuse (302); 

lorsqu'une liaison qui a un chemin de routage 
de secours pre-identifie devient defectueuse, 
adjoindre des instructions de chemin de routa- 
ge de secours a des paquets de donnees af- 35 
fectes qui sont routes sur la liaison defectueuse 

(303) ; et 

acheminer par le chemin de routage de secours 

(304) les paquets de donnees affectes, le che- 
min de routage de secours comprenant un che- *o 
min a commutation par etiquettes avec routage 
explicite. 

16. Un procede selon la revendication 15, comprenant 

en outre la declaration d'une defaillance de liaison 45 
au reseau, en utilisant un protocole de routage 
(305). 

17. Un procede selon la revendication 15 ou 16, com- 
prenant en outre I'etablissement d'une nouvelle so 
route de reseau pour remplacer la liaison defec- 
tueuse (306). 

18. Un procede selon Tune quelconque des revendica- 
tions 1 5 a 1 7, comprenant en outre I'utilisation d'un 55 
algorithme de prevention de boucle apres I'appari- 
tion d'une defaillance de liaison, pour determiner 
que le reseau a converge et est depourvu de boucle 



(307). 

19. Un procede selon I'une quelconque des revendica- 
tions 1 5 a 1 8, dans lequel les instructions de chemin 
de routage de secours comprennent une pile d'eti- 
quettes basee sur la Commutation par Etiquettes 
Multiprotocol e. 

20. Un procede selon la revendication 19, dans lequel 
la pile d'etiquettes comprend des etiquettes pour 
une source de paquets et une destination de pa- 
quets. 

21. Un procede selon Tune quelconque des revendica- 
tions 15 a 20, dans lequel le chemin a commutation 
par etiquettes avec routage explicite est base sur 
une information de topologie de reseau. 

22. Un procede selon la revendication 21, dans lequel 
I'information de topologie de reseau est obtenue a 
partir d'un protocole de reseau. 

••• - ♦ » ... -tv- 

23. Un procede selon Tune quelconque des revendica- 
tions 15 a 22, dans lequel le reseau informatique 
utilise un protocole de routage a commutation par 
etiquettes. 

24. Un programme informatique comprenant du code 
de programme informatique pour accomplir toutes 
les etapes du procede de I'une quelconque des re- 
vendications 15 a 23, lorsque ce programme est 
execute sur un ordinateur. 

25. Un programme informatique selon la revendication 
24, incorpore sur un support lisible par ordinateur. 
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